Cryptojacking Resurfaces As Monero Miner Malware Hits 3,500+ Sites: Report

Key Points

1. The malware does not steal passwords or lock files but covertly uses visitors' computing power to mine Monero.

2. Researchers at cybersecurity firm c/side discovered the malware, which avoids detection by throttling CPU usage and hiding traffic in WebSocket streams.

3. Cryptojacking involves using victims' devices to mine cryptocurrency without their knowledge, a tactic previously popularized by the now-defunct service Coinhive.

4. The new wave of cryptojacking uses low-profile, throttled WebAssembly miners to stay under the radar, making detection with older methods difficult.

5. The primary targets of these attacks are server and web app owners, rather than the individual visitors whose devices are hijacked.